Bug 1036818 - saslauthd does not create kerberos ticket for imap
Summary: saslauthd does not create kerberos ticket for imap
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: cyrus-sasl
Version: 7.0
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Petr Lautrbach
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On: 506709 860737
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-02 16:51 UTC by David Spurek
Modified: 2015-03-02 05:28 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of: 860737
Environment:
Last Closed: 2014-02-05 15:20:52 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Comment 1 David Spurek 2013-12-02 16:52:18 UTC 
The same issue for rhel7.

cyrus-sasl-2.1.26-13.el7
cyrus-imapd-2.4.17-5.el7
krb5-server-1.11.3-34.el7
Comment 3 Petr Lautrbach 2014-02-05 15:20:52 UTC 
Only FAIL I can see running the reproducer test is in:

    rlPhaseStartTest "Try imtest with gssapi without running kinit"
        rlIsRHEL 5 && rlRun "klist -5" 0
        rlIsRHEL '>=6' && rlRun "klist" 0
        echo "" > /var/log/imapd.log
        rlRun "do_imtest" 0
        rlRun "cat /var/log/imapd.log"
        rlIsRHEL 5 && rlRun "cat /var/log/imapd.log | grep imtest | grep \"GSSAPI Error\" | grep \"No credentials cache found\"" 1
        rlIsRHEL '>=6' && rlRun "cat /var/log/imapd.log | grep imtest | grep \"GSSAPI Error\" | grep \"Credentials cache file '/tmp/krb5cc_0' not found\"" 1
    rlPhaseEnd

This code seems to be completely wrong. You expect klist to return 0 when there's no kerberos ticket created yet. Please fix it. I'm closing this as NOTABUG now, but if you find a better reproducer, feel free to reopen it.
Note You need to log in before you can comment on or make changes to this bug.